$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft File: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json) Hash identifier: ZMaI0aL4gca6zUl5ltaZhKNh0VH4BOBc9p0C50tpCI8= Subject key identifier: 04:19:E5:2E:96:B0:76:43:CC:CD:0F:51:0E:5A:02:8B:37:32:CA:2B Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 Certificate issuer: /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft Manifest number: 8B Signing time: Wed 15 May 2024 07:14:31 +0000 Manifest this update: Wed 15 May 2024 07:14:31 +0000 Manifest next update: Wed 22 May 2024 07:14:31 +0000 Files and hashes: 1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: +al7ztC2A5NqUawdLJj/J7P7BYsYhN9kLEm35Tkpmq0=) 2: 00B2998A576911EEA54BD978C4F9AE02.roa (hash: vp36Zl+WFuWslPPrxZrZo/Ztbdz18Q/TK67tiiSY7d0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 May 2024 07:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04 Validity Not Before: May 15 07:14:31 2024 GMT Not After : May 22 07:14:31 2024 GMT Subject: CN=664460d7-f5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ce:a0:f6:db:12:f0:a1:37:7d:c6:c5:c7:06: 08:3b:6d:7b:4f:69:7a:b6:38:d3:db:5d:6a:8d:b6: ac:ac:7f:94:70:d6:13:7d:92:80:ad:3f:fd:81:f7: 0c:d3:b9:1a:e5:7b:94:42:ee:b1:01:45:94:fa:4d: 2b:be:d5:f6:79:36:09:09:d7:61:06:0c:17:35:3b: 31:aa:60:64:f9:43:c7:6e:40:e0:fc:2e:50:c9:c9: 69:79:17:02:a1:e4:f8:dc:5b:0e:3f:70:e8:c3:00: 57:bd:12:c1:8e:ef:9f:25:3c:fe:0f:ba:7c:6e:93: 47:b5:c3:5e:ca:07:a7:b4:24:bf:0a:ff:cf:c9:87: 4e:3b:47:ad:c2:55:2d:1f:0f:89:4a:1d:2e:04:f0: 37:c9:61:99:0d:40:ed:94:10:b9:e2:a8:f9:a7:fa: 11:88:02:a9:fe:5b:59:fa:87:2e:f7:9b:eb:7c:47: 28:40:7b:24:e4:62:fa:92:56:59:64:d4:30:fe:b8: 7c:a3:0b:62:81:87:24:88:51:c1:7b:b9:4c:9a:46: a0:6e:79:d9:45:a8:4b:4b:89:19:83:1d:92:74:47: d2:05:c0:f6:68:28:d2:44:7c:4c:e1:8a:43:cb:6b: f9:d1:2d:47:6f:a7:ff:1a:46:42:85:34:09:df:ae: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:19:E5:2E:96:B0:76:43:CC:CD:0F:51:0E:5A:02:8B:37:32:CA:2B X509v3 Authority Key Identifier: keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:58:06:d7:0b:23:a4:17:dd:ca:92:75:ce:8f:6b:1e:ed:77: 47:27:e4:f5:73:ef:7f:e7:e8:0d:fd:bc:cb:59:d7:ac:66:52: a5:d4:ef:e9:00:6b:8e:7e:cb:e3:5c:52:e9:0f:cd:fb:29:6f: 10:eb:0a:2f:ec:2c:4a:6b:c9:5e:bc:ef:83:fc:39:22:44:1e: 54:60:d1:2e:26:bb:fd:06:96:69:3c:f3:0e:48:f6:0e:58:34: 38:af:23:8c:fe:18:ba:e1:79:63:93:63:a5:b3:3d:0c:ad:42: 2f:61:e5:4f:c7:fd:41:3e:d4:48:81:10:7a:bb:51:a2:e3:4a: 9f:39:f6:b4:8e:4e:17:61:9f:b3:b0:2c:c6:b6:da:c9:ec:8f: 5d:32:50:63:96:8e:f4:d1:e5:2c:56:30:25:ca:0d:46:ce:9a: 39:d5:84:3d:75:3d:24:c4:d5:94:66:38:8b:f3:f1:31:f2:c0: ba:60:6f:8e:0c:8e:52:a4:b6:45:df:a5:bc:c2:2b:2d:45:0d: 8c:d8:c4:ed:7a:be:50:8b:ac:71:c2:ec:86:e9:99:b3:7b:6e: dc:a7:32:9c:30:83:fc:f3:76:d1:a3:8b:f3:a8:51:9f:ba:8c: ed:91:df:de:a1:d9:34:89:0a:ae:e8:58:15:76:9c:31:6b:a6: 07:1e:14:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz RUUyNjdDMDQwHhcNMjQwNTE1MDcxNDMxWhcNMjQwNTIyMDcxNDMxWjAYMRYwFAYD VQQDEw02NjQ0NjBkNy1mNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc6g9tsS8KE3fcbFxwYIO217T2l6tjjT211qjbasrH+UcNYTfZKArT/9gfcM 07ka5XuUQu6xAUWU+k0rvtX2eTYJCddhBgwXNTsxqmBk+UPHbkDg/C5QyclpeRcC oeT43FsOP3DowwBXvRLBju+fJTz+D7p8bpNHtcNeygentCS/Cv/PyYdOO0etwlUt Hw+JSh0uBPA3yWGZDUDtlBC54qj5p/oRiAKp/ltZ+ocu95vrfEcoQHsk5GL6klZZ ZNQw/rh8owtigYckiFHBe7lMmkagbnnZRahLS4kZgx2SdEfSBcD2aCjSRHxM4YpD y2v50S1Hb6f/GkZChTQJ367kcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQZ5S6W sHZDzM0PUQ5aAos3MsorMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBWAbXCyOkF93KknXOj2se7XdHJ+T1c+9/5+gN/bzLWdesZlKl1O/p AGuOfsvjXFLpD837KW8Q6wov7CxKa8levO+D/DkiRB5UYNEuJrv9BpZpPPMOSPYO WDQ4ryOM/hi64Xljk2Olsz0MrUIvYeVPx/1BPtRIgRB6u1Gi40qfOfa0jk4XYZ+z sCzGttrJ7I9dMlBjlo700eUsVjAlyg1Gzpo51YQ9dT0kxNWUZjiL8/Ex8sC6YG+O DI5SpLZF36W8wistRQ2M2MTter5Qi6xxwuyG6Zmze27cpzKcMIP883bRo4vzqFGf uoztkd/eodk0iQqu6FgVdpwxa6YHHhQV -----END CERTIFICATE-----Generated at Wed May 15 09:27:28 2024 by rpki-client on console-fra.rpki-client.org